Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a46275f95a2f04c612052771e5a79d08e81c5a7.cer
File:                     7a46275f95a2f04c612052771e5a79d08e81c5a7.cer (raw, json)
Hash identifier:          PUebkiPyGg/qC3UCREO+ZlLYSetU5GnC0m38jUd7bxg=
Subject key identifier:   B2:0A:E2:87:3E:C7:B9:EB:26:82:FB:4E:B7:BB:AF:16:62:DB:0C:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF7EAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3cb4f73e-089f-4e91-a272-bb4d3d03302f/7a46275f95a2f04c612052771e5a79d08e81c5a7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3cb4f73e-089f-4e91-a272-bb4d3d03302f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:23:25 +0000
Certificate not after:    Mon 11 Aug 2025 12:39:52 +0000
Subordinate resources:    AS: 267672
                          IP: 45.224.196.0/22
                          IP: 2804:4518::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16744110 (0xff7eae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:23:25 2023 GMT
            Not After : Aug 11 12:39:52 2025 GMT
        Subject: CN=7a46275f95a2f04c612052771e5a79d08e81c5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e2:aa:74:5a:94:de:7e:86:16:45:03:0a:38:
                    a1:28:3b:21:35:33:90:0d:a0:d0:af:13:bc:f2:f4:
                    73:f9:d1:0a:25:eb:4e:9b:b3:62:f8:ce:7f:d5:b5:
                    b6:eb:9d:27:7e:1e:bd:fb:2d:18:b6:6d:f9:e6:d3:
                    a8:71:54:8e:b7:f1:8b:81:cc:5b:4f:4f:6b:ca:55:
                    ad:ad:64:df:9f:29:11:7b:96:59:f8:e2:56:b0:6f:
                    c3:1d:62:1f:10:7f:4f:c4:0b:8a:b0:cc:8a:30:98:
                    e6:db:79:ea:70:ed:53:bf:03:a9:3b:ed:d8:d5:4e:
                    b1:37:a2:60:ef:05:2c:b7:d9:98:3b:eb:f0:f8:4d:
                    f0:4b:f6:1e:d3:6e:c1:c4:ec:dd:fb:7b:a7:0b:cb:
                    71:13:15:bf:ce:79:cb:3d:a2:a5:f0:d3:29:a9:83:
                    62:4e:88:bf:fa:e4:e4:8b:00:6e:6e:2c:df:1e:2c:
                    6b:bf:6f:68:16:8c:c1:90:27:12:d7:59:70:fe:e5:
                    26:29:26:b3:f1:a1:69:8b:f1:84:04:d4:4f:18:ee:
                    ed:c6:4f:d0:93:4d:2c:91:e4:0d:10:1c:4c:2c:56:
                    6f:81:14:a8:40:ae:bd:16:4b:6e:53:c4:68:2b:26:
                    8d:24:e3:f8:60:81:ab:49:54:1d:0d:8f:bd:1e:06:
                    0a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0A:E2:87:3E:C7:B9:EB:26:82:FB:4E:B7:BB:AF:16:62:DB:0C:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3cb4f73e-089f-4e91-a272-bb4d3d03302f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3cb4f73e-089f-4e91-a272-bb4d3d03302f/7a46275f95a2f04c612052771e5a79d08e81c5a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.196.0/22
                IPv6:
                  2804:4518::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267672

    Signature Algorithm: sha256WithRSAEncryption
         33:56:ff:8e:16:af:b9:39:ac:61:b2:a1:34:ed:ba:6c:97:7d:
         92:43:8a:b5:2f:08:6b:5f:7f:72:02:1b:fb:ad:46:57:e3:d2:
         2d:39:d5:10:e6:81:26:84:26:31:ea:42:68:63:77:9f:45:15:
         5f:89:9a:19:14:c4:d3:2b:c7:68:ac:bf:2e:63:53:7a:09:0a:
         bc:d8:ed:33:35:87:43:b4:e7:17:48:44:d2:cb:f4:19:c7:11:
         a3:93:f4:54:7c:96:25:99:30:3f:4b:c7:dd:64:d3:80:96:df:
         17:1d:b9:6a:27:d7:82:93:1a:26:27:b9:59:0a:9c:ad:e9:e2:
         bf:33:83:8d:3b:a5:51:4e:2e:b3:9d:9d:81:cc:c0:97:f7:0c:
         d5:92:a3:10:99:f0:d3:ac:8a:6b:9e:6b:c4:55:e4:ed:ff:13:
         fc:59:9e:19:c9:91:d3:66:6e:5d:93:c4:42:90:81:f6:a4:2f:
         2d:dc:fe:d1:d9:ee:0e:59:87:77:0b:f1:3b:7a:67:40:79:e1:
         52:50:51:8e:0d:7f:82:a7:63:f3:95:96:ad:d5:ac:0d:f0:3b:
         08:36:d1:6e:41:af:40:57:49:86:8a:2e:72:0d:d2:2f:95:78:
         93:af:51:e5:c7:00:66:7d:36:d9:e9:22:4c:80:d0:dc:69:26:
         30:4f:a4:0b
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAP9+rjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyOTE3MjMyNVoXDTI1MDgxMTEyMzk1
MlowMzExMC8GA1UEAxMoN2E0NjI3NWY5NWEyZjA0YzYxMjA1Mjc3MWU1YTc5ZDA4
ZTgxYzVhNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANfiqnRalN5+
hhZFAwo4oSg7ITUzkA2g0K8TvPL0c/nRCiXrTpuzYvjOf9W1tuudJ34evfstGLZt
+ebTqHFUjrfxi4HMW09Pa8pVra1k358pEXuWWfjiVrBvwx1iHxB/T8QLirDMijCY
5tt56nDtU78DqTvt2NVOsTeiYO8FLLfZmDvr8PhN8Ev2HtNuwcTs3ft7pwvLcRMV
v855yz2ipfDTKamDYk6Iv/rk5IsAbm4s3x4sa79vaBaMwZAnEtdZcP7lJikms/Gh
aYvxhATUTxju7cZP0JNNLJHkDRAcTCxWb4EUqECuvRZLblPEaCsmjSTj+GCBq0lU
HQ2PvR4GCuMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSyCuKHPse56yaC+063u68W
YtsMFzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zY2I0ZjczZS0wODlm
LTRlOTEtYTI3Mi1iYjRkM2QwMzMwMmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2NiNGY3M2UtMDg5Zi00
ZTkxLWEyNzItYmI0ZDNkMDMzMDJmLzdhNDYyNzVmOTVhMmYwNGM2MTIwNTI3NzFl
NWE3OWQwOGU4MWM1YTcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3gxDANBAIAAjAHAwUAKARFGDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFZgwDQYJKoZIhvcNAQELBQADggEBADNW
/44Wr7k5rGGyoTTtumyXfZJDirUvCGtff3ICG/utRlfj0i051RDmgSaEJjHqQmhj
d59FFV+JmhkUxNMrx2isvy5jU3oJCrzY7TM1h0O05xdIRNLL9BnHEaOT9FR8liWZ
MD9Lx91k04CW3xcduWon14KTGiYnuVkKnK3p4r8zg407pVFOLrOdnYHMwJf3DNWS
oxCZ8NOsimuea8RV5O3/E/xZnhnJkdNmbl2TxEKQgfakLy3c/tHZ7g5Zh3cL8Tt6
Z0B54VJQUY4Nf4KnY/OVlq3VrA3wOwg20W5Br0BXSYaKLnIN0i+VeJOvUeXHAGZ9
NtnpIkyA0NxpJjBPpAs=
-----END CERTIFICATE-----